On my journey of implementing CardSpace into DotNetNuke I came across this exception: "That assembly does not allow partially trusted callers."
It seems that System.IdentityModel or System.ServiceModel doesn't like that DotNetNuke is set to run under medium trust by default.
I've set DotNetNuke to high trust for my development, we'll see how this pans out.